Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
File:                     4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json)
Hash identifier:          GjjLvxYYzqMwLIEVGTmVrnvGu50abSR642tYEvDkvbM=
Subject key identifier:   57:A5:AC:72:F0:17:26:B0:97:57:DE:CE:C3:F2:EE:7F:9C:E7:FB:CC
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Certificate issuer:       /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial:       27D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
Manifest number:          2780
Signing time:             Sat 28 Feb 2026 15:41:02 +0000
Manifest this update:     Sat 28 Feb 2026 15:41:01 +0000
Manifest next update:     Sat 07 Mar 2026 15:41:01 +0000
Files and hashes:         1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: cWY+JAcHsh8FwHUU81BR2B/bMfNhzf5zMxPH5r/1wRc=)
                          2: 79393030926D11F0B792FC45C4F9AE02.roa (hash: 9LG4PePaB1f3Hkny9Z2l8d3XmWqB0X8f5wbTBmmVcoQ=)
                          3: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: YRyAIa+9kqjeJON/+m339DSD36eJAdvbC6dlw8cArb0=)
                          4: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: zljvCYtPHGxkTjF0cJrDQGngJEaHA+QSXJeZL2Snd8A=)
                          5: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: 5DmpgkEHXaDkkR9mgpZabmssGePTrFoLLGp9YTKRdHI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
                          rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10195 (0x27d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
        Validity
            Not Before: Feb 28 15:41:01 2026 GMT
            Not After : Mar  7 15:41:01 2026 GMT
        Subject: CN=69a30c8d-fd7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:21:1e:ef:9b:b8:2e:be:c5:0a:ef:94:54:
                    8b:54:0d:6b:06:20:37:5d:9e:a8:80:53:f5:b4:45:
                    4c:ec:4b:14:7d:b8:5e:e1:78:d4:45:1e:5f:41:fa:
                    77:80:50:e9:7a:80:d2:78:7c:e9:c7:10:38:3e:d6:
                    99:37:ca:26:b7:e4:2b:c3:86:f8:b0:23:b5:c1:dc:
                    9d:c3:cb:36:c0:74:f3:d4:2b:11:73:a1:a2:c4:d0:
                    2d:f1:db:2a:da:41:a0:a3:21:47:b0:19:1a:60:61:
                    2d:3c:54:74:fd:d9:3e:8d:27:24:01:d0:37:9c:dc:
                    67:2e:d3:62:fc:96:08:86:2e:c3:19:97:80:97:7b:
                    16:a4:9c:c9:e5:2b:b7:3b:6a:6e:15:ea:54:e2:bf:
                    8f:5e:1d:55:c5:95:e7:df:f0:5b:c9:6f:d3:00:0c:
                    13:ba:c0:22:07:07:9a:a9:0c:36:35:ce:c8:47:6e:
                    3f:08:e4:6a:15:88:ba:b4:a1:bd:a1:4f:be:04:01:
                    40:cf:75:42:b8:0c:36:88:e2:dc:9e:b1:fe:93:39:
                    04:3f:14:cf:91:41:8a:06:7c:65:fc:85:30:22:58:
                    1b:e9:87:55:1d:7f:07:92:b0:6f:13:d5:48:71:4f:
                    36:39:a4:72:7f:9f:d0:88:a9:99:82:9e:9b:f4:67:
                    e9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A5:AC:72:F0:17:26:B0:97:57:DE:CE:C3:F2:EE:7F:9C:E7:FB:CC
            X509v3 Authority Key Identifier:
                keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:43:23:f1:7d:a3:3e:ec:c2:98:45:a0:e9:1d:db:b2:cd:95:
         94:a1:25:79:69:61:9d:2d:7a:36:23:2f:3b:0f:01:48:32:e7:
         03:e8:ef:48:82:e0:c5:be:e7:43:f0:af:59:cb:89:6e:a3:97:
         b1:cc:b4:e0:e0:c5:21:f0:04:52:f9:b8:13:ce:17:8c:4c:a7:
         5d:2b:0f:7d:61:de:40:ce:a2:80:6e:a1:d5:d7:eb:73:d7:58:
         bf:03:5e:59:bb:70:14:69:cb:7d:7d:46:d4:f5:9f:6d:07:1c:
         80:6c:02:89:85:af:78:3c:53:a6:2e:61:24:98:92:6d:2d:94:
         dc:2f:92:45:1c:d6:e4:a8:98:f3:6d:1c:9c:27:79:64:4c:d6:
         3d:b0:a7:c0:72:17:cf:8e:72:a7:78:64:fe:37:da:95:03:f6:
         a4:4b:7a:f0:3b:2e:a8:9a:31:d5:69:b4:6d:5a:ff:f8:a6:a4:
         53:1a:f4:2a:15:0c:a6:20:10:e1:b4:17:38:cc:6f:cf:f9:2e:
         d9:61:f1:fe:37:85:2c:12:fb:92:fc:1c:4c:fc:2e:37:6f:16:
         19:0b:98:52:9d:17:e1:2d:38:c5:66:af:05:1a:c5:41:2f:68:
         89:46:8c:dc:56:cc:28:f6:07:b6:42:0f:30:db:2c:48:ef:ad:
         a0:72:2f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:57 2026 by rpki-client